⤷ Title: Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 25 May 2025 17:21:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Sun, 25 May 2025 17:21:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api
Medium
Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint
Manipulate a hidden API endpoint to change product pricing using HTTP method tampering and JSON injection, exposing a critical…
⤷ Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 26 May 2025 09:49:33 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Mon, 26 May 2025 09:49:33 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
Medium
Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
Chained server-side parameter pollution to leak a reset token and hijack admin for the bounty mines.
⤷ Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 27 May 2025 07:00:38 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 27 May 2025 07:00:38 GMT
════════════════════════
⌗ Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity
Medium
Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale
Chained server-side parameter pollution to leak a reset token and hijack admin for the bounty mines.
⤷ Title: Hacking Vulnerable Bank API (Extensive)
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 29 May 2025 14:23:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
════════════════════════
𐀪 Author: CyberPreacher
════════════════════════
ⴵ Time: Thu, 29 May 2025 14:23:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #penetration_testing #apihacking #api
Medium
Hacking Vulnerable Bank API (Extensive)
Exploiting about 40 vulnerabilities on a vulnerable bank APIs, and documenting every step to help professionals with an API test…
⤷ Title: Part 1: Setting Up crAPI — A Hands-On Guide to API Hacking & Security Testing
════════════════════════
𐀪 Author: Mihir Sathvara
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 13:27:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #apihacking #cybersecurity #walkthrough
════════════════════════
𐀪 Author: Mihir Sathvara
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 13:27:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #apihacking #cybersecurity #walkthrough
Medium
Part 1: Booting Up crAPI & Getting into API Hacking 🚀🕵️🧑💻
🧑💻Introduction
⤷ Title: API Hacking Fundamentals for Beginners: A Guide to Getting Started
════════════════════════
𐀪 Author: Prakhar Verma
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 14:14:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #apihacking #api_security #ethical_hacking #bug_bounty
════════════════════════
𐀪 Author: Prakhar Verma
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 14:14:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #apihacking #api_security #ethical_hacking #bug_bounty
Medium
API Hacking Fundamentals for Beginners: A Guide to Getting Started
If you’re new to cybersecurity or ethical hacking, APIs (Application Programming Interfaces) are an exciting and critical area to explore…
⤷ Title: Public APIs vs. Private APIs: A Bug Hunter’s Perspective
════════════════════════
𐀪 Author: N4!T40 07
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 14:42:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty #web_security #apihacking
════════════════════════
𐀪 Author: N4!T40 07
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 14:42:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #penetration_testing #bug_bounty #web_security #apihacking
Medium
Public APIs vs. Private APIs: A Bug Hunter’s Perspective
Application Programming Interfaces (APIs) are the backbone of modern software architecture, enabling different systems to communicate and…
⤷ Title: Understanding Hacking GraphQL — Part 2
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
Medium
Understanding Hacking GraphQL — Part 2
In part 1, we introduced GraphQL, explored why it’s gaining popularity, and examined its security implications. We also covered the basics…
⤷ Title: Generic University | API hacking Practice lab⚒️
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
════════════════════════
𐀪 Author: n1nja9
════════════════════════
ⴵ Time: Sun, 03 Aug 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #hacking_lab #apihacking #api_penetration_testing
Medium
Generic University | API hacking Practice lab🔎⚒️
Thanks to Katie Paxton-Fear for creating this vulnerable API for practicing.
⤷ Title: Exploiting a Mass Assignment API Vulnerability
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:59:14 GMT
════════════════════════
⌗ Tags: #information_disclosure #cybersecurity #burpsuite #api #apihacking
Medium
🐍 Exploiting a Mass Assignment API Vulnerability
Turned a product review into a silent assassin — Carlos never saw it coming.